v8/test/mjsunit/regress/asm
Clemens Backes 4b6ee11532 [asm] Fix importing monkey-patched objects
This fixes a long-standing TODO to disallow importing receivers that
have "toString" or "valueOf" patched. Calling those methods could have
observable side effects, so allowing that would require bigger
refactorings to ensure that we only call each such function exactly once
per import, and in the right order.
Since this use case is rare, we just forbid importing such receivers.

R=jkummerow@chromium.org

Bug: chromium:1248677
Change-Id: I99bbd7db950ec3c7ac9cc1f59e8c476688e7d7b6
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3190475
Reviewed-by: Jakob Kummerow <jkummerow@chromium.org>
Commit-Queue: Clemens Backes <clemensb@chromium.org>
Cr-Commit-Position: refs/heads/main@{#77149}
2021-09-29 18:19:30 +00:00
..
regress-6196.js
regress-6298.js
regress-6431.js
regress-6700.js
regress-6838-1.js
regress-6838-2.js
regress-6838-3.js
regress-6838-4.js
regress-7893.js
regress-8377.js
regress-8505.js [d8][mjsunit][tools] Improve d8 file API 2021-06-01 13:37:57 +00:00
regress-9022.js
regress-575364.js
regress-592352.js
regress-599719.js
regress-599825.js
regress-608630.js
regress-613928.js
regress-617525.js
regress-617526.js
regress-617529.js
regress-618608.js
regress-673297.js
regress-743622.js
regress-775710.js
regress-1223839.js [wasm] Only print compiler for proper functions 2021-07-05 14:29:37 +00:00
regress-1248677.js [asm] Fix importing monkey-patched objects 2021-09-29 18:19:30 +00:00
regress-1252747.js [wasm] Add regression test for 1252747 2021-09-28 13:03:14 +00:00
regress-crbug-714971.js
regress-crbug-715455.js
regress-crbug-719384.js
regress-crbug-721835.js
regress-crbug-722348.js
regress-crbug-759327.js
regress-crbug-771428.js
regress-crbug-898974.js
regress-crbug-934138.js
regress-crbug-969368.js
regress-crbug-976934.js
regress-crbug-1006592.js
regress-wasm-crbug-599413.js
regress-wasm-crbug-618602.js